Ubuntu
strongswan package

  1. Bug #1940079
  2. Comment #13

Comment 13 for bug 1940079

Revision history for this message
Paride Legovini (paride) wrote : Re: Strongswan in Focal doesn't support TPM 2.0 through the TSS2 interface...

My MR against the Debian packaging got merged:

https://salsa.debian.org/debian/strongswan/-/commit/b062db8d85e1502010cd45bc2beb5fbd67912cab

so this will be fixed in Debian unstable with the next upload and in Ubuntu with the merges that will follow. However I'd like to see this land in Impish, so I'm requesting a FFe [1].

This is actually borderline between a bugfix (for which we wouldn't need a FFe) and a new feature. It's a bugfix because in the libstrongswan-extra-plugins package description we write:

  Also included is the libtpmtss library adding support for TPM plugin
  (https://wiki.strongswan.org/projects/strongswan/wiki/TpmPlugin)

but without a TSS implementation the plugin can't do anything useful. OTOH adding tss2 support enables new code sections which were previously disabled, and requires a new dependency, so to some extent this is a new feature.

The "new feature" bits are however confined in a module (libtpmtss.so, provided by libstrongswan-extra-plugins), which is basically useless without also enabling a TSS implementation. This should be a safe case not only for a FFe but also for a SRU.

For the moment this is a FFe for Impish. If accepted we'll evaluate what to do with the stable releases.

[1] https://wiki.ubuntu.com/FreezeExceptionProcess
[2] https://wiki.ubuntu.com/StableReleaseUpdates#Other_safe_cases